note 108704 added to function.crypt

Password hashing should be done only with crypt and NEVER with SHA* and MD5 or hash(). The fundamental reason is that crypt is designed to be SLOW which is a VERY good thing for password hashing. It also automatically generate a salt every time which makes pre-computed tables to "decrypt" passwords useless (the generated salt is stored in the returned string for convenience). If you want to understand why please have a look at: http://chargen.matasano.com/chargen/2007/9/7/enough-with-the-rainbow-tables-what-you-need-to-know-about-s.html ---- Server IP: 208.69.120.55 Probable Submitter: 77.96.222.175 ---- Manual Page -- http://www.php.net/manual/en/function.crypt.php Edit -- https://master.php.net/note/edit/108704 Del: integrated -- https://master.php.net/note/delete/108704/integrated Del: useless -- https://master.php.net/note/delete/108704/useless Del: bad code -- https://master.php.net/note/delete/108704/bad+code Del: spam -- https://master.php.net/note/delete/108704/spam Del: non-english -- https://master.php.net/note/delete/108704/non-english Del: in docs -- https://master.php.net/note/delete/108704/in+docs Del: other reasons-- https://master.php.net/note/delete/108704 Reject -- https://master.php.net/note/reject/108704 Search -- https://master.php.net/manage/user-notes.php